CVE-2021-31758

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN

published May 7, 2021

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

⚠️ A stack buffer overflow is lurking in Tenda AC11 devices and it’s as sneaky as a cat burglar in the night! Think of it as an overstuffed suitcase that bursts open when someone tries to cram in one last pair of shoes—excessive data can escape and cause chaos! An attacker could exploit this vulnerability to execute arbitrary code on the device, leading to potential unauthorized access and control over your network! Imagine a thief not just breaking in, but also rearranging your entire living room while you're away.

Put simply

Think of it as an overstuffed suitcase that bursts open when someone tries to cram in one last pair of shoes—excessive data can escape and cause chaos! The vulnerability lies in the /goform/setportList function of the Tenda AC11 firmware, where excessive data in a crafted POST request can lead to a stack buffer overflow, allowing malicious code execution.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on the device, leading to potential unauthorized access and control over your network! Imagine a thief not just breaking in, but also rearranging your entire living room while you're away. To protect your device, upgrade to the latest firmware version immediately. If you're running an affected version below 02.03.01.104_CN, applying the firmware update will seal this vulnerability for good. Regularly check for updates to keep your device secure. You've got this! With a simple firmware update, your network will be back on track and secure in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06619 · 93.8th percentile
Published
2021-05-07T22:01Z
EPSS history
Timeline
  • 07 MAY 22:01Z
    An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN
    cvelistv5